Creating the Jamf Trust App in Microsoft Intune - Jamf Security Cloud Portal Setup Guide

Jamf Security Cloud Portal Setup Guide
Solution
Application
Jamf Connect
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Requirements

Before beginning this process, you must obtain the SECRET_KEY and API_KEY values for the Activation Profile in Jamf Security Cloud.

  1. Log in to Jamf Security Cloud and navigate to Devices > Activation Profiles.

  2. Select the required Activation Profile.

  3. Click Microsoft Intune, then the Windows app configuration section.

  4. Click Show App Configuration.

  5. Locate the key values in the displayed code.

Note:

These key values must be kept secure. Rather than copying them into a file for use later, Jamf recommends that you keep Jamf Security Cloud open and then copy these values over into the command described below only when you are ready to do so. Saving these values in a note or similar file is not good security practice.

  1. Open Microsoft Intune.
  2. Navigate to Apps > All Apps.
  3. Click Add.
  4. Select Windows app (Win32) under App Type.
  5. Click Select app package file under Select File.
  6. Select the intunewin file included with the Jamf Trust MSI file.
  7. Click OK.
  8. Select Jamf Trust under Publisher on the App Information page.
  9. Click Next.
  10. Add the shareable link to the Install command on the Program page.

    The command should be in the following format, with all placeholders defined below:

    msiexec /i "{filename.msi}" SHAREABLE_LINK=https://e.wandera.com/{code} UEM=MEM API_KEY="{api_key}" SECRET_KEY="{secret_key}" NO_PII=true /quiet /qn /norestart
    {filename.msi}
    The name of your Jamf Trust package replaces this string. For example, "jamftrust.winclient.8.2.0.119.signed.msi".
    {code}
    The enrollment link replaces this string. For example, "https://e.wandera.com/abc123".
    {api_key}
    The API key located under Windows on Microsoft Endpoint Manager in your Jamf Security Cloud activation profile replaces this string.
    {secret_key}
    The secret key located under Windows on Microsoft Intune in your Jamf Security Cloud activation profile replaces this string.
    {no_pii}
    This setting eliminates the standard level of Personally Identifiable Information (PII) from Jamf Trust when set to true. The setting is not required when using Jamf Security Cloud, but is set to true by default when using Jamf Safe Internet.
    Note:

    This command includes an SSL certificate that ensures an HTTPS block page is displayed when a user attempts to access blocked content. If you do not want to install this certificate, add INSTALL_ROOT_CERTIFICATE=false after SECRET_KEY={secret_key} to the end of the parameter list. Additionally, add DESKTOP_SHORTCUT=yes to add Jamf Trust for Windows to the desktop.

  11. Select the Requirements page.
    Set the following fields:
    • Operating system architecture —Select 64-bit.
    • Minimum operating system —Select Windows 11
  12. Click Next.
  13. Select Manually configure detection rules under Rules format on the Detection rules page.
  14. Select File under Rule type.
    1. In the Path field, enter %ProgramFiles%\JamfTrust\Service.
    2. In the File or folder field, enter JamfTrust.Client.Windows.Service.exe.
    3. In the Detection method field, select String (version).
    4. In the Operator field, select Greater than or equal to.
    5. In the Value field, enter the version of Jamf Trust you are deploying.
  15. Click OK.
  16. Click Next until you reach the Assignments page.
  17. Select the desired target group under the Required section on the Assignments page.
  18. Click Next.
  19. Click Create on the Review + create page.